Experiences with ThreatFire

[progress]

What about your experiences with ThreatFire? ::)

[Joeythedude]

Good experiences. For me does what it says on the tin - Alerts on suspicious program behaviour - if program A tries to modify program B , installing in sys32 , startup , all good calls that my AV doesn't make.

[JimIT]

Great app. Saved my bacon a few times.

[Firebytes]

TF blocked/interfered with too many things on my systems without giving a pop-up or other indication that it was the cause. Also, I didn't want to possibly have to deal with keyboard problems in the future.

[EASTER]

Like he said.

That app is in serious trouble and it just shouldn't be.

My advice? Sell it to a developer at a discounted price or give it away to a developer/programmer that can make it into a worthy security program.

I have lost all faith in Symantec's acquistion of PCTools and subsequently in the same process ruined TF even worse then before.

Thats my story and i am sticking to it.

[progress]

-{ Quote: "Saved my bacon a few times." }-

I was running it for 2 months and there was no TF action. The only action: It slows down my machine :'(

As we can see, I'm not the only user with TF problems ...

[GES/POR]

Well i installed the beta a few times on different images and the first time it installed in Portugese ??? and the second time as well + it flagged a legit system file

[progress]

-{ Quote: "Portugese ???" }-

I selected "German" language but the news tab was showing "French" :ouch:

[GES/POR]

Note i havent selected any languages at all, im dutch/english user but the beta installs in protugese for some odd reason

[spy_protector]

-{ Quote: "What about your experiences with ThreatFire? ::)" }-
ya man...it rockss...8)

[progress]

It slowed down my machine :'( Maybe I'll try the next version ...

[Warklen]

I like threatfire never had any problems with it yet..runs nice and light for me:)

[raven211]

It tends to be very light, even though some non-specific situations will make it use a lot of CPU-time - and then I've no scheduled scanning.

I've told them about this, and they're aware and are always trying to improve that part, e.g. through new versions.

It's simply a little like Prevx (yes, I know they're VERY different, but read on...) - looking at the behavior, where TF has to hook into everything. This provides very early and effective protection, but without optimization might cause what I described first.

[Joeythedude]

It does a lot of I/O according to Task Manager , but very little CPU time on my PC. ( 4 year old laptop , XP 2)

[tipstir]

Set the security level higher than the default is 3.. Level 4 is good. It does detect malware and the cloak rootkits too.. Requires internet community so you'll need an internet connection for it's dbase.

[progress]

Wow, there are a lot of problems with ThreatFire :gack:

[LoneWolf]

Tried several versons of TF and always had the same result,
apparently ran fine for a few days then 100% cpu by TF and total freeze/lockup of pc. Had to hard reboot and do a rollback of my system for all to be ok again. TF is not for me.

[Page42]

I gave TF every chance I could, but on my machines it just did not run well... there was always one thing or another wrong.

For awhile there was a major conflict with avast! that just caused horrible performance. To their credit, they fixed that.

There were frequent false positives, that I was told were the direct result of running the sensitivity level too high. Things calmed down when I reverted to default levels, and even remained tolerable when I inched the sensitivity back up a notch.

I didn't much care for the AV scanning engine that got incorporated into the mix. Tech support seemed to always downplay that feature, which made me question why it was included in the first place.

TF's rookit scanner never seemed to run properly for me.

Manual updating always was difficult and glitchy.

The keyboard problem, which I never experienced, concerned scared me.

I had slowdowns and instability, which totally disappeared when I yanked TF. I'd been told that with its deep hooks, TF was conflicting with ZAP and its OS Firewall protection. As much as I didn't want to believe that was the case, I couldn't ignore how smooth things ran with TF removed.

I definitely did not like it when TF was purchased by Symantec, but I tried to keep an open mind, telling myself that things would be different this time... that the presence of Symantec on the scene would not automatically create problems, which I have come to believe is a standard course of events with Symantec software. Eventually I quit going against what I had perceived over the years, and I concluded that Symantec sticking their big fat finger in the TF pie was indeed a turn for the worse.

I was fairly persistent in my efforts to give TF a fair opportunity on my machines, dating back to the CyberHawk days. But one day, I realized that I was not being realistic. TF was just one big source of trouble for me. :thumbd:

[raven211]

-{ Quote: "Wow, there are a lot of problems with ThreatFire :gack:" }-

Yes, ance, we already understand that you think so from reading all your (previous) posts. :gack:

I'm fine with people criticizing the product for a good reason, believe me, but your post here and some other places are just pointless.

I think it's good other users describe their serious problems with TF as the devs. do read the things here at Wilders.

[progress]

-{ Quote: "
I'm fine with people criticizing the product for a good reason, believe me, but your post here and some other places are just pointless.
" }-

:'(

-{ Quote: "
I think it's good other users describe their serious problems with TF as the devs." }-

That's the reason why I started this poll. But I agree, I think it's enough. This poll can be closed now :)

[raven211]

-{ Quote: ":'(
" }-

I don't mean to be harsh, but what you write got to be based on something. Enough is enough - no offence.

[Page42]

-{ Quote: "I don't mean to be harsh, but what you write got to be based on something. Enough is enough - no offence." }-
I value a thread such as this because after I post of my experiences, I may see some different opinions or even some concurring ones and learn more on the topic. Maybe the OP has some "history" with this program, but not all of us are aware of it and, honestly, we're not as put off by it as you.

I appreciate the poll. :thumb:

[Arup]

Two years back I tested it with a brand new AMD dual core 2GB PC and it made it feel like a early 350MHz Celeron, hope it has improved since then.

[SIR****TMG]

Ran fine for a few days then 100% cpu by TF and total freeze/lockup of pc. Had to hard reboot was not happy. Removed it:thumbd:
__________________

[tipstir]

It's so low in system resources not like the teatimer that uses 87K and hogs the cpu. TF better than prior versions the 4.1.0.25 not bad.. It can be run server OS which I doing that's both file/web server no issues. I think you all just have way to many protections loaded on your system. IS is great for those who don't know much about security or for wireless laptop users.

I've see such a lot of add-on SA everyone is running with TF.

[Firebytes]

-{ Quote: "I think you all just have way to many protections loaded on your system." }-

The only real time security software I was running alongside TF when I was using it was Avast antivirus and TF still gave me problems. I guess one thing alongside TF was too much. ::)

[progress]

-{ Quote: "I guess one thing alongside TF was too much. ::)" }-

I was running AVG + TF, maybe we should run TF without any AV :-[

[Page42]

-{ Quote: "I was running AVG + TF, maybe we should run TF without any AV :-[" }-
There are more than a few users posting on the PCTools ThreatFire forum who advocate doing just that.

[progress]

Doing what? Running TF without any AV or running TF + AVG? :doubt:

[Dark Star 72]

-{ Quote: "Doing what? Running TF without any AV or running TF + AVG? :doubt:" }-

Running TF alone without any other security software. I believe I'm correct that the PCTools mod on the forum has stated that he simply uses TF and Windows FW, nothing else. Probably doesn't run under an admin account though.

[Page42]

Sorry for not being clear. I was referring to advocating running TF without an AV.

[progress]

I see, I remember this thread (http://www.wilderssecurity.com/showthread.php?t=236133&highlight=threatfire) :)

[tipstir]

-{ Quote: "I was running AVG + TF, maybe we should run TF without any AV :-[" }-

No you still need your AV and spyware programs, unless they have the same features of TF then you really don't need to use TF or PrevX.

[tipstir]

-{ Quote: "The only real time security software I was running alongside TF when I was using it was Avast antivirus and TF still gave me problems. I guess one thing alongside TF was too much. ::)" }-

Avast is powerful but TF with Avast is another issue. Avast doesn't have TF features. Rising Sun RAV Free 2009 does as MBI actually it has two different types . I am testing that right now with there Behavior Trojan/Malware Blocker addition in Rising Sun PC Doctor also this program can scan your system OS and see what's patches are needed for it. Gives you the option to download them and patch the system without going to the MS web site to it. Both are freeware.

TF if set to the max it still keeps on prompting me for the same programs. I've even listed them as trust but it still does it. If you set it to default then it runs normal.

If you see I might have TF listed without AV program well some of them still have SDAV running. I'll have to pull that out. I going to replace those with RAV Free. Out of everything I've tested so far that was able to clean out viruses even the toughes ones out of the files and I was able to use them right away. None of the others I've tested did that. All they did is stuck the bad files into a vault or quantine them and that's if, I mean if the could even detect the threat even?

[raven211]

-{ Quote: "I value a thread such as this because after I post of my experiences, I may see some different opinions or even some concurring ones and learn more on the topic. Maybe the OP has some "history" with this program, but not all of us are aware of it and, honestly, we're not as put off by it as you.

I appreciate the poll. :thumb:" }-

As I said in my post previous to that; "I'm fine with people criticizing the product for a good reason --- I think it's good other users describe their serious problems with TF as the devs. do read the things here at Wilders."

Am I or possibly YOU missing something, or did I misunderstand your message?

I understand it as you're trying to say that I didn't want this discussion to continue - and that's not true at all - I'm happy with this discussion continuing, as long as what's written is based on something.

[Joeythedude]

The thing is - and it applies to any software people run , is that we always blame the last application we add.

In a sense all the other applications are also to blame as it is an incompatabilty between all the software on the PC which is the problem.

:)

This poll has 50-60 responses as I write this, and roughly 20% in all catagories.

I would say you could get a similar survey reaction to ANY security app in use here at wilders.

[tipstir]

I've pulled the chain on TF...

[Page42]

-{ Quote: "I understand it as you're trying to say that I didn't want this discussion to continue - and that's not true at all - I'm happy with this discussion continuing, as long as what's written is based on something." }-
Yes, that was my impression... that you didn't want the discussion to continue. Your words, "Enough is enough" (http://www.wilderssecurity.com/showpost.php?p=1454195&postcount=21) would be what caused me to believe that. But you're telling me that you are happy with the discussion continuing. Great. We agree. I don't care for members trying to silence other members, and I got the impression that that was what you were trying to do with the thread OP. Let's move on, shall we? :)

[WilliamP]

I have Avira Prem. AV ,Comodo FW with +D. I have tried Mamutu and Threatfire . I have, so far had no problems with TF, but had to remove Mamutu. I haven't noticed any slow down. The problems that I had with Mamutu was at boot.

[shift]

run good for me... Threatfire + ESS 4

the only problem is smart update not worked..

[wembleyy]

if i have a super computer i ill install it, it completely froze my pc when booted

[raven211]

-{ Quote: "if i have a super computer i ill install it, it completely froze my pc when booted" }-

Well, that still wouldn't help if you got the same setup, right? It froze. :what:

[cqpreson]

I have no problem with ThreatFire,when I used it.So I have a good experience with it,only did I know other friends' keyboards are killed.

[icr]

Me too never had any problems with ThreatFire:thumb: but Avira is enough for me so I am not using it now.

[kupton]

I've been running TF with Avira free on 4 computers (3 XP pro, 1 Vista Bus.) and it's been fine so far.

[Fuzzfas]

My main complaints about TF are:

1) Give the deny option.
2) Allow for disabling the net module. I can't help getting the feeling that it has a small impact on the internet connection.

Other than that, the latest version is nice and lighter than the previous ones (who were more heavy and slowing down system).

[raven211]

-{ Quote: "My main complaints about TF are:

1) Give the deny option.
2) Allow for disabling the net module. I can't help getting the feeling that it has a small impact on the internet connection.

Other than that, the latest version is nice and lighter than the previous ones (who were more heavy and slowing down system)." }-

1) It's coming, and I thought you knew.
2) What net-module? I'm not running it right now, but maybe it's something named "TfNetMon" if I remember correctly. Good point in that case. It should have the option to be opted out.

[Fuzzfas]

-{ Quote: "1) It's coming, and I thought you knew.
2) What net-module? I'm not running it right now, but maybe it's something named "TfNetMon" if I remember correctly. Good point in that case. It should have the option to be opted out." }-

1) Yes, but until it comes...
2) Yes, the TfNetMon is the module which controls network access the threats. It can be manually disabled through command line, but it gives then tons of error entries in Windows Event Viewer, which i hate.

[raven211]

-{ Quote: "1) Yes, but until it comes...
2) Yes, the TfNetMon is the module which controls network access the threats. It can be manually disabled through command line, but it gives then tons of error entries in Windows Event Viewer, which i hate." }-

I can see the net-monitor being a good layer in a number of security software, including ThreatFire as it's supposed to act fast. This is sadly not the case right now with 4.5 - even requires a restart for a setup file which means it's already let it do stuff. It's being worked on by the devs. as we speak.

I don't remember any noticeable impact running it myself, I'm completely happy with my browsing speeds atleast. ;D I would just look for the fastest browser out there if that's all you're looking for. ;)

[SystemJunkie]

Not even downslowing the machine, more a slow scanner at all. I think there are more light tools outthere
with better efficiency and less false positives.

[bigc73542]

It ran great for about 36 hours then it stopped all I/O to HDD Killed keyboard and mouse also. Had to reinstall with an Image. It won't be going back on my computer. At first thought it was The Avira proactive beta but after reinstall of os and reinstall of Avira beta, machine still running great without Threatfire.

bigc

[raven211]

-{ Quote: "It ran great for about 36 hours then it stopped all I/O to HDD Killed keyboard and mouse also. Had to reinstall with an Image. It won't be going back on my computer. At first thought it was The Avira proactive beta but after reinstall of os and reinstall of Avira beta, machine still running great without Threatfire.

bigc" }-

Pretty sad to hear that. :( I've heard other people have similar problems, but not this serious.

[shakethebabyass]

I waited for almost a year after I got a 64bit machine to get the 64bit version of ThreatFire, to my dissapointment the latest version slows my computer to a crawl and I have a very fast computer.

To bad, this program has potential.

[Noob]

It was fine, but i replaced it with OA

[nikanthpromod]

Very very good against Zero day threats but it
Slowed down my pc:-\

[firzen771]

my experience is good, but too consistently buggy and problem prone.

[RWB]

It crashed my machine, had to revert to earlier setup. I then deleted all the
folders holding the installation.

[progress]

-{ Quote: "my experience is good, but too consistently buggy and problem prone." }-

On Win 7 as well? I always had problems with ThreatFire on Win XP, but it seems to work fine on Win 7 :-* *knock on wood*

[firzen771]

-{ Quote: "On Win 7 as well? I always had problems with ThreatFire on Win XP, but it seems to work fine on Win 7 :-* *knock on wood*" }-

same experience on every OS ive used, XP had the most, but Vista and 7 are still with their odd problems.

[JohnnyDollar]

-{ Quote: "It ran great for about 36 hours then it stopped all I/O to HDD Killed keyboard and mouse also. Had to reinstall with an Image. It won't be going back on my computer. At first thought it was The Avira proactive beta but after reinstall of os and reinstall of Avira beta, machine still running great without Threatfire.bigc" }-

I used Threatfire a couple of yrs ago on an xp machine and it did fine. I was waiting on a compatible x64 version, but I keep reading similar comments to this one posted by bigc and I am afraid to try it again.:doubt: It seems like people have all these issues and then PCTools comes out with a newer version that supposedly fixes all the issues, but they still remain or become worse.:gack: I am starting to think that they ought to just cancel any further development and throw in the towel or hand it off to another security company that might be able to do something with it to make it more stable.:-\

[progress]

It's slowing down my machine again - bye bye TF :-[

[Mr.PC]

After switching to Instant System Recovery (Rollback Rx) and Virtualization (Sandboxie),
I got rid off any Real-Time Scanners, Behavioral Blockers, HIPS etc.
I haven't used TF since 2007.
From what I've seen, here, TF isn't as Popular as it used to be...

[fblais]

... and also has not been upated since nov 2009.
Since PCTools has now been sold to Symantec, I don't expect a new release ever.

[Ibrad]

Was it good.....yes
Though now it seems like it is dieing :(

[Noob]

-{ Quote: "Was it good.....yes
Though now it seems like it is dieing :(" }-
True, it seems like it will be dead soon, not many updates :what: